Security
Trust has to be part of the product.
CourseShelter is intended to hold sensitive education records. Security, privacy, accessibility, continuity, and audit evidence are therefore product requirements—not marketing add-ons.
Compliance roadmap
HECVAT, SOC 2, FERPA-aligned contracting, accessibility evidence, penetration testing, and insurance.
Privacy & FERPA
Data minimization, controlled use, access logging, retention, and customer-directed deletion.
Infrastructure
Tenant isolation, encrypted transport, separate object storage, least privilege, and auditability.
Continuity
Backup testing, disaster recovery, incident response, and founder-independent emergency procedures.
Accessibility
WCAG 2.1 AA target, independent evaluation, and ACR/VPAT publication before public-sector production use.
Trust Center
One place for security documentation and procurement evidence.
Plan for the day you need it